1. Overview
This document provides instructions for the Fortinet FortiGate-1000D FortiGuard Advanced Malware Protection (AMP) service, which includes Antivirus, Mobile Malware, and FortiSandbox Cloud Service. This license is for a 1-year contract for the Fortinet FortiGate-1000D Model.
Advanced threats are continuously evolving in number and sophistication. A perimeter firewall alone is often insufficient. Effective security requires solutions that can detect previously unknown threats, complementing existing next-generation firewalls and other security devices within your network.
The FortiSandbox Cloud Service is an advanced threat detection solution designed to perform dynamic analysis to identify previously unknown malware. The actionable intelligence generated by FortiSandbox Cloud is then fed back into preventive controls within your network, enabling proactive threat neutralization.
Figure 1: Representative Fortinet FortiGate device, compatible with this service license.
2. Setup and Activation
This section outlines the steps for activating your FortiGuard Advanced Malware Protection (AMP) license for the FortiGate-1000D.
- License Delivery: Your license contract (FC-10-01006-100-02-12) will be delivered via email within 1-2 business days of purchase. Ensure you check your inbox and spam folders for this email.
- Access Fortinet Support Portal: Navigate to the official Fortinet Support Portal using your web browser. You will need your Fortinet customer account credentials to log in.
- Register Product: Once logged in, locate the 'Product Registration' or 'License Activation' section.
- Enter License Key: Input the license key provided in your email. This key links the FortiGuard AMP service to your FortiGate-1000D device.
- Verify Activation: After entering the key, follow the on-screen prompts to complete the activation. The system will confirm the successful activation of your 1-year FortiSandbox Cloud Service.
- Integrate with FortiGate-1000D: Ensure your FortiGate-1000D is connected to the internet and can communicate with Fortinet's update servers. The activated services will automatically begin to update and protect your device. Refer to your FortiGate-1000D device manual for specific steps on verifying service status and configuration.
If you encounter any issues during activation, please refer to the Troubleshooting section or contact Fortinet Support.
3. Operating the FortiGuard AMP Service
The FortiGuard Advanced Malware Protection (AMP) service enhances the security capabilities of your FortiGate-1000D by providing comprehensive threat intelligence and dynamic analysis.
3.1. Core Functionality
- Dynamic Analysis: The FortiSandbox Cloud Service performs dynamic analysis of suspicious files and URLs in a secure, isolated environment to identify previously unknown malware.
- Threat Intelligence Feedback: Actionable intelligence derived from the sandbox analysis is fed back into your FortiGate-1000D's preventive controls, enabling rapid response to new threats.
- Antivirus Protection: Provides real-time protection against known viruses, spyware, and other malicious software.
- Mobile Malware Protection: Extends protection to mobile-specific threats, safeguarding devices connected to your network.
Figure 2: Overview of Fortinet Security Subscriptions, highlighting the comprehensive nature of threat intelligence.
3.2. FortiGuard Subscription Options
The FortiGuard AMP service leverages various FortiGuard subscription options to provide robust protection. These include:
- Next Generation Application Control and IPS: Application control and intrusion prevention system (IPS) foundational security technologies for FortiGate firewalls.
- Antivirus: Neutralizes nearly 100,000 malware programs daily.
- Web Filtering: Categorizes and blocks over 160,000 malicious websites.
- Web Application Security Service: Provides fully automated updates to protect your sensitive data and content.
- Antispam: Effective antispam solution to combat email-borne threats.
- Vulnerability Scan: Helps FortiClient solution accurately identify and manage the latest software vulnerabilities.
- Botnet IP and Domain Reputation: Blocks approximately 32,000 botnet command & control communication attempts daily.
- Database Security Control: Provides updated content policies that cover known exploits and configuration weaknesses.
- Mobile Security Service: Protects against attacks targeting mobile platforms.
- Advanced Threat Protection (FortiSandbox Cloud): Utilizes dynamic analysis to identify zero-day threats.
Figure 3: Detailed breakdown of FortiGuard Subscription Options and their functionalities.
4. Maintenance and Renewal
Maintaining continuous protection is crucial for network security. Fortinet designs its support and subscriptions to be continuous.
4.1. Subscription Continuity
To ensure uninterrupted protection, it is essential to renew your FortiGuard AMP license before its expiration date. A lapse in the service period occurs if the subscription is not renewed by the expiration date. During a lapse, your FortiGate-1000D may not receive the latest threat intelligence updates, potentially exposing your network to new vulnerabilities.
4.2. Renewal Process
You will typically receive renewal notifications prior to your license expiration. To renew:
- Monitor Expiration: Keep track of your license expiration date through the Fortinet Support Portal or your FortiGate-1000D management interface.
- Purchase Renewal: Contact your Fortinet reseller or visit the Fortinet website to purchase a renewal license (e.g., FC-10-01006-100-02-12 for another year).
- Activate Renewal: Follow the same activation steps as outlined in the Setup section using your new renewal license key.
Prompt renewal ensures that your FortiGate-1000D continues to receive critical updates and maintains its advanced threat protection capabilities.
5. Troubleshooting
This section provides guidance for common issues you might encounter with your FortiGuard AMP service.
| Issue | Possible Cause | Solution |
|---|---|---|
| Service not active after activation | License not correctly applied; network connectivity issues; FortiGate not synchronized. |
|
| No new threat updates | Subscription expired; network connectivity issues; FortiGuard servers unreachable. |
|
| FortiSandbox Cloud Service not analyzing files | Incorrect FortiSandbox configuration on FortiGate; connectivity to FortiSandbox Cloud. |
|
If these steps do not resolve your issue, please contact Fortinet Support for further assistance.
6. Specifications
- Manufacturer: FORTINET
- Manufacturer Part Number: FC-10-01006-100-02-12
- Service Type: FortiGuard Advanced Malware Protection (AMP)
- Included Services: Antivirus, Mobile Malware, FortiSandbox Cloud Service
- Compatible Device: FortiGate-1000D
- License Duration: 1 Year
- License Delivery: Via e-mail within 1-2 business days
- Item Model Number (Service): FortiSandbox Cloud Service
- Date First Available: May 9, 2017
7. Warranty and Support
Fortinet offers various support services to ensure the optimal performance and reliability of your FortiGate-1000D and its associated services.
7.1. FortiCare Support Services
- FortiCare 8x5 Service: Provides access to technical support via the web portal, online chat system, and telephone during business hours (8 hours a day, 5 days a week). Includes return and replace for hardware failures and access to technical support requests.
- FortiCare 24x7 Service: Offers round-the-clock access to mission-critical support services (24 hours a day, 7 days a week, 365 days a year). Includes advanced replacement service for hardware failures.
- FortiCare 360° Service: Includes all 24x7 services plus premium support, cloud-based analytics, and a personalized monthly audit report. This service helps organizations proactively detect and remediate potential security and performance issues.
Figure 4: Descriptions of FortiCare Support Services.
7.2. FortiCare Premium RMA Service
Designed to minimize downtime, this service offers several options for hardware replacement:
- Next-day Delivery: Parts delivered the day following RMA approval by Fortinet support.
- 4-Hour Courier: Parts delivered on-site 24 hours a day, 7 days a week within 4 hours of RMA approval by Fortinet support.
- 4-Hour On-site Engineer: Parts delivered on-site with an engineer, 24 hours a day, 7 days a week within 4 hours of RMA approval by Fortinet support.
FortiCare Secure RMA Service: This service allows for non-return of an appliance for customers with strict rules and requirements for physical data protection.
Figure 5: Diagram illustrating FortiCare Support Services levels and processes.
For detailed information on FortiCare services and to open a support ticket, please visit the official Fortinet Support website.
